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(54) Data capture system 

(57) The system involves the fitting of Electronic Number Plates (ENP's) to all road vehicles with 
roadside interrogators (oiitstations OS) and central control equipment to collect and validate vehicle 
identity data before passing it on to ah accounts processing system AP. The system is organised so 
that there are a number of vehicle data processing devices (Data Validators DV) which receive data 
from the outstation units (OS) interrogated by a communications controller (CCL). Each Data Validator 
(DV) is allocated a discrete subset of all vehicles in the system to enable vehicle location checking to be 
maintained as the vehicles move through the system. Any apparent error in vehicle data is passed on 
to a supervisory processor which checks if the error can be explained. This provides a powerful vehicle 
location consistancy check and fraud identification system allowing speedy detection of fraud, stolen 
cars or electronic number plates. 
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( BEGIN ^ 



RECEIVE VEHICLE DATA 

(SERIAL NUMBER) 
, (SECURITY CODE) 
(CURRENT LOCATION) 



SERIAL" 
"NUMBER IN RANGE" 

.FOR THIS DV 
? 

"YES 



FROM SERIAL NUMBER 
DEDUCE MEMORY LOCATION 
HOLDING THIS 
VEHICLES DATA 



DV ■» DATA VALIDATOR 

SP = SUPERVISORY PROCESSOR 

AP = ACCOUNTS PROCESSOR 

ENP - ELECTRONIC NUMBER PLATE 

WRT - WITH RESPECT TO 



ENP 
IN: COMMISSION 
? 

"YES 

"ENP" 

'ALREADY BEING" 

PROCESSED IN SB- 
? 

"no 

'ValiB" 

^LOCATION WRTLASf 
STORED LOCATIOH 
? 

"YES 

'ValId^ 
"security code wrt" 
4ast stored cool 

? 

'YES 



SEND 
INVALID ENP 
INFORMATION 
TO THE SP 



.r SEND 
.YEb I DATA ON TO THE SP 
FOR 

| FURTHER PROCESSING 



NO 



SEND 
INVALID LOCATION 
TO SP FOR 
ANOMALY PROCESSING 



SEND 

INVALID SECURITY CODE 

TO SP FOR 
ANOMALY PROCESSING 



UPDATE STORED VALUES 

AND SEND 
REGISTRATION NUMBER 
AND LOCATION 
TOAP 



IF LOCATION IS 
HIGH PRIORITY 
SEND MESSAGE TO OBTAIN 
FRAME OF PICTURE 
OR WARN POLICE 



Fin. 4 



7=r 



BNSDOCID; <GB 2154832A_I_> 



2154832 



4/4 



_T_ 



DV 
ENP 



DATA VALIDATOR : 
ELECTRONIC NUMBER PLATE 



RECEIVE 
ANOMALY DATA 
FROM A DV 




YES 



INFORM THE OPERATOR 
OF AN UNIDENTIFIED 
VEHICLE IN THE SYSTEM 
AMD LOG THE EVENT 




YES 



INVALID 1 
SECURITY}--- 
CODE j 



CAN 

''SECURITY CODE \ N0 
liE EXPLMNED BY KNDWn^ 
EQUIPMENT 
FAULTS 
? 

YES 



TAN LAST 

, Current location , 
&e explained by knowwt 
equipment 

FAULTS^ 

N? r; 



YES 



® 



INFORM- THE OPERATOR 
OF SUSPECTED FRAUD 
AND LOG THE EVENT 



INSTRUCT THE DV 
TO ACCEPT THIS 
CURRENT DATE AND TO 
UPDATE ITS RECORDS 



Fin 5 
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SPECIFICATION 

Data capture system 

5 This invention relates to a data capture system 
for the automatic charging of tolls to vehicular 
users of roads. 

According to the present invention there is 
provided a data capture system for the auto- 
1 0 matic charging of tolls to vehicular users of 
roads, the capture system comprising, a plu- 
rality of vehicle identity data transmitting 
means each being individually attachable to 
vehicles, a plurality of roadside vehicle iden- 
15 tity data interrogating means linked, by a com- 
munications network with a central control 
which includes a plurality of communications 
control processors, and a plurality of vehicle 
identity data validating processors which com- 
20 municate by means of a common inter-proces- 
sor bus, wherein each data validating proces- 
sor is allocated a discrete subset of all vehicles 
handled by the system and wherein upon 
transmitted vehicle identity data being de- 
25 tected by any one roadside vehicle identity 
data interrogating means, the vehicle identity 
data is transmitted through the communi- 
cations network to a communications control 
processor and then by way of the common 
30 ircter-processor bus to the particular data vali- 
dating processor allocated to the subset of 
vehicles within which, the detected vehicle 
identity data is located, whereupon; the de- 
tected vehide identity data is validated for use 
35 in enabling the preparation of toll invoices for 
despatch- to the particular vehicle user con- 
cerned., , 

The invention will be better understood 
from the following description of an exern- 
40 pfary embodiment which should, be read in ' 
conjunction with the accompanying drawings, 
in which: _ 

Figure 1. shows a plan-view of the appara- 
tus which comprises an electronic number 
45. plate; . ,-. , v :';'j 

Figure 2 shows a side-view of the apparatus 
shown in Figure 1; ; 

Figure 3 shows a block schematic of the 
data capture system in accordance with the 
50 invention; . 

Fegure 4 shows a flow diagram for the data 
validation processing; 

Rgure 5 shows a flow diagram for the 
anomaly processing/fraud identification for 
55 the supervisory processor. 

The data capture system comprises elec- 
tronic number plates (ENPs) fitted to road 
vehicles, roadside interrogators, data transmis- 
sion equipment and central office equipment 
SO to collect and validate vehicle identity data 
before passing it on to an accounts processing 
system. 

ELECTRONIC NUMBER PLATE (ENP) 
65 Referring now to the drawings; each vehicle 



in the system is fitted with vehscie identity 
data transmittinn mp^nc; nr oiortPAn^ 

■ -i/ — " v.»^ie*. aiw iiuiliuci 

plate (ENP). 

The ENP 1, (as shown in Figure 1 and 
70 Figure 2), is a small sealed module approxi- 
mately 200mm long X . 75rnrn wide and 
40mm deep. It is located by means of secur- 
ing points 2 arid 3 beneath vehicle body 4. It 
is easy to fit, but once fitted is difficult to 
75 remove. 

Each ENP apparatus has a unique identify- 
ing serial number which is converted into 
code and stored in the ENP apparatus during 
manufacture. All ENP apparatus codes are 
80 independent of any vehicle mechanical regis- 
tration number, making it difficult to copy and 
defraud. 

At the fitting station where the vehicle is 
equipped, the vehicle registration number is 
85 entered into the system by an operator via a 
keypad, whilst the serial number is read auto- 
matical into the system by an interrogator. 
This serial number is not displayed to the 
operator, for security reasons. The ENP appa- 
90 ratus is equipped with two aeriaSs 5 and 6 
which provide electromagnetic coupling with 
inductive road loops (cables buried in the 
road). One aerial receives sufficient energy to 
power up the EIMP apparatus when it is in the 
95 immediate vicinity of a power loop PL. This 
aerial also provides a clock input for the ENP 
circuits which generate the synchronous data 
to be transmitted via the other aeria' back to a 
receive loop RXL. 
100 The ENP apparatus receives its power and 
clock at 147kHz and transmits the data on a 
/ 73.5kHz carrier. The data rate is 

9.1 875kBaud, i.e. one sixteenth of the pow- 
ering frequency. 
105 The ENP apparatus contains thres mte- 
^ grated circuits (IC's). One, a fuse-Jink PROM, 
is programmed with the seriaS number code 
during manufacture. Another, a CMOS cus- 
tom I C performs all logic functions, and a 
1 10 special bipolar IC, measures signal thresholds 
and performs the linear functions. These IC's, 
together with other components, are mounted 
on a printed circuit board 7. 

The ENP apparatus is capable of transmitt- 
1 15 ing the serial code (in phase modulated form), 
a security or check code for providing an extra 
protection against fraud, and (optionally) vari- 
able data set-up by the driver of the vehicle 
on a variable data unit within the vehicle. 
1 20 Various types of variable data unit's can be 
used. Some of the data field being varied 
automatically by peripheral equipment con- 
nected via the unit. This may include such 
items as emergency vehicle status and priority 
125 code, bus identification, depot, fleet and route 
number. The remainder of the data field being 
varied by switches on the unit. 

OUTSTATIONS 
1 30 Along the roadside RS are located vehicle 
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identity interrogating means or outstations OS 
which comprise an interrogator, which is con- 
nected to the inductive road loops (power PL 
and receive RX), a processor, a transmission 

5 unit arid a' number of interfaces to local equip- 
ment, such as a toll display TD where charges 
are indicated, a closed circuit television con- 
trol CCTVC, a maintenance handset or termi- 
nal TM through which police and mainte^ 

10 nance services gain access to information, and 
a priority controller PC for handling control 
signals relating to vehicles requiring priority. 

CCTV SYSTEM v ' 

1 5 The CCTV system includes cameras, c at 
certain roadside interrogation points (outsta- 
tion OS) which store pictures of vehicles in a 
category termed suspect, for onward transmis- 
sion to the central control CC for analysis. A 
20 suspect vehicle could be one for which no • 
identity data is received, one where the secu- 
rity code or location is. found to be inconsis- 
tent; or one wanted by the police, for example 
a stolen vehicle. A list of suspect vehicles (the 
25 'Wanted List*) is held by the .supervisory pro- 
cessor SP at the central control CC. 

SYSTEM IN GENERAL 

It is arranged for the interrogator to demo- 
30 dulate signals received from each; receive loop 
RX and pass the identity data to the processor 
where the code is verified. Vehicle identity 
data are subsequently transmitted from the 
outstations OS by the transmission univcen- 
35 tral control CC by way of a communications , 
network CN in the form of cable network. 
Each communications controller CCL has con- 
trot of a part of the complete cable network, 
with a number of outstations (e.g.; ten) con- 
40 nected (via the; network) to each of its cornry 
munications channels. The central control CC 
comprises a number of communications con- 
trollers CCL, a number of processors (accounts 
processor AP, Supervisory processor SR., fleet 
, 45 location processor FLP, traffic statistics proces- 
sor TSP,: data validation processor or <teta 
validator DV, and a spare processor SPE), disc 
and tape storage, and operator communi- 
cation facilities OC which include visual dis^ 
50 play units (VDU's) and a hard copy terminal 
or printer. :> - 

The communications controllers CC, handle 
data transmission between the outstations and 
a high speed bus IPB to which all the central 
55 control processors are connected. The IPB is a 
local area network link arrangement termed an 
ETHERNET bus which operates 10 Mbits over 
a single coaxial cable. Processors tap into the 
cable at intervals allowing up to 100 stations 
60 (nodes) on a 500m cable with up to 1024 
stations in any network. 

Concerning the various processors men- 
tioned above, the data validation processors 
or data validators DV check the security code 
65 (if used) and location (outstation) of each ENP 



against the last known interrogation data, an 
accounts processor AP, prepares road charge 
invoices and despatches these periodically to 
the vehicle owners and a supervisory proces- 
70 sor SP oversees the operation of the data 

validators DV, co-ordinates fault detection and 
recovery, including checking if apparent errors 
in vehicle data can be explained by faults 
known to the system ('Anomaly Processing'), 
75 arid handles operator communications. 

Data received from the outstation units OS 
are interrogated by the associated communi- 
catidns controller CC and passed to the appro- 
priate data validator DV via the high speed 
80 bus (local area communications network IPB). 
Each data validator DV is allocated a discrete 
subset of all vehicles in the system, to enable 
vehicle location checking to be maintained as 
the vehicles move through the area, and are 
85 detected by the different outstation units OS 
and, hence, different communications control- . 
lers CC. \ - " • - • " 
' Any apparent error in vehicle data is passed 
on to the supervisory processor SP, which 
90 checks if the error can be explained by known 
faults in the system, such as a faulty upstream 
interrogator. At the same time, if the vehicle 
w^s detected at a manned or CCTV outstation, 
data is sent to that outstation for display on 
95 the local terminal or inclusion with display at 
the central control. Valid vehicle data is out- 
put tbr use by the Accounts processor AP. 
^ 'Data that fails the validity check and 
: anomaly analysis causes that ENP to be 
100 marked as 'suspect' in the computer records. 
1 It is added to the 'Wanted List' in the supervi- 
r: sory processor SP and marked for special 
attention in the data validator DV responsible 
for that EN P; V" ' ~ / 3f 

105 1 = ^ \° - : ■•' ' ' Ys ,n ' : 

rii COMMUNICATION CONTROLLERS 
" n i "Ref&rih^ to the Communications Controllers 

CCL these poll each outstation in turn to 
r> Vetfiev^ the vehicle information; Any control 
1 10 information being sent from the central con- 
trol CC tp an outstation OS is included irvthe 
: appropriate poll request frame. : The protocol 
adopted permits messages to be sent from the 
"communication controllers CCL to all units on 
115 a line. The protocol used is the internationally 
aqreed standard for High Level Data Link 
Control Procedures (HDLC). The main function 
of the communication controller CCL is to 
buffer the individual vehicle information for 
120 onward transmission to the data validators 
DV. It determines from each Vehicle'-s ENP 
code which data validator DV is the required 
destination. (It should be noted that there are 
several data validators DV each processing a 
1 25 subset of all vehicles in the system). The 

tcommunication controller CCL sets up output 
buffers accordingly and then sends the data to 

the destination(s). 
130 TRANSFER OF DATA (OUTSTATION TO CEN- 
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TRAL OFFICE) 

Prts\ri+w io ninon tr> anw ru itcr*attr.r. i ir»i+ ufhtrh 

• J B«y. aw jj.ww.. a>v ■ > \ aaa •>*■» «w *>. w a ■ «■••<» imiwn 

is connected to CCTV equipment or which has 
a terminal connected to St; for these sites,; 
5 information from the outstation may elicit a 
response from the centra! control. Usually the 
response will relate directly to a vehicle pass- 
ing the site, so it is essential to get the 
response to the outstation quickly (before the 

1 0 CCTV equipment overwrites a stored picture 
frame with another picture, or before the 
vehicle has moved too far away from a man- 
ual site to permit police intervention). Conse- 
quently these sites are marked as 'high prior- . 

1 5 ity' and will be polled by a communication 
controller CCL at about twice per second, 
interrupting the sequential polling of each of 
the other (low priority) outstations. 

As an outstation only transmits information 

20 to the central control when asked to do so by 
a communication, controller CCL, different 
types of information can be combined into 
one data packet, depending upon what is 
requested by a communication controller the 

25 current status of the equipment at the outsta- 
tion at the time of polling. These 1 types in- 
clude: 

a) Vehicle ENP data; 

b) Site and lane identification, per set of . . 
30 ENP data; 

c) Fault indications; 

d) Toll charge confirmation; 

e) Whether a terminal is connected to the 
outstation's handset port; 

35 f) Messages and/or commands from the 
terminal; and 

g) The results of a self check by the 
outstation processor. , [ 

. Note that these types are for standard but- 

40 stations operating manually. In addition to 
these, outstation initialisation involves several 
'supervisory' data packets to set up the link to 
a communicaions controller CCL and acknow- 
ledge completion of the initialisation process. 

45 . As a communication controller CCL receives 
outstation data packets, it sends vehicle ENP 
anformatiori to the data validators DV and all 
other information to the supervisory processor 
SP. For each set of ENP information,; the 

50 vehicle's ENP serial number is used to identify 
which data validator DV holds its current 
location (and security code, if any) and differ- 
ent data packets are set up to send to each 
data validator DV. High priority site data is 
, 55 separated from low priority site data so that 
the data validator D V is synchronised to the 
end of polling of the high priority outstations. 

TRANSFER OF DATA (CENTRAL OFFICE TO 
60 OUTSTATION) « 
\, The, normal data transmitted from a com- 
munication controller CCL to an outstation is a 
poll for vehicle ENP data. The following items 
may be incorporated within the 'poll request' 
65 packet: 



■ a) Toll charge updates; 

b) Equipment fault clearance; 

c) Instructions to outstation units to perform 
self check; - ; 

70 d) Requests for self check test results; 

e) Replies to messages/commands, input 
from the engineer's terminal; and : 

f) Confirmation of vehicle commissioning. 
The following items are interleaved with the 

75 poll request packets: 

a) Outstation initialisation and down line 
loading information; and 

b) 'Wanted Vehicle' requests.. 

80 HDLC PROTOCOL 

As each outstation OS communicates with a 
single communications controller CC, the op- 
erating mode for the links is that of primary- 
secondary polling. The communication con- 

85 troller CCL acts as the primary (master) station 
and the outstations on each link as the secon- 
dary (slave) stations. 

Each communication controller CCL outsta- 
tion 'link' is set-up for frame transmission and 

90 messages are passed in the form of a header 
(made up of the required outstation address 
and control information), an information field 
and a frame check sequence. As the message 
is received, the frame check sequence is,re- 

95 computed and checked against the frame 

check sequence at the end of the message. If 
the frame check sequence is correct, an ac- 
knowledgement is included in the next frame 
to be sent in the opposite direction. This 
100 mechanism allows for re-transmission of un- 
acknowledged messages, thus increasing the 
reliability of data transfers throughout the net- 
• ' work;' - •• . - ■ v . v ;:<>:*< ;T . r ... 

105 MESSAGE HANDLING (OUTSTATION) 
* • For each link under its control, the com- 
munication controller CCL cycles around each 
f outstation OS under the control of two lists. 
All low priority outstations are contained in 

1 1G one list and the communication controller CCL 
cycles around them, polling for vehicle ENP 
data, unless interrupted by a higher priority 
item i.e., a high priority outstation poll, a 
wanted vehicle request or initial isation/down- 

1 15 fine loading of an outstation. The last two 
items are random whereas the high priority 
outstation polE ss under the full control of the 
communication controller CCL. Each half-sec- 
ond, the communication controller CCL polling 

1 20 task will be flagged to use the high priority 
outstation list — breaking into the low priority 
cycle. When all high priority sites have been 
polled, the communication controller CC re- 
verts to the low priority cycle again. 

125 

MESSAGE HANDLING— {CENTRAL OFFICE) 

As messages are received over the HOLC 
links, the communication controller CCL sepa- 
rates the data into buffers for each data vali- 
1 30 datbr DV and the supervisory processor SP. 
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To optimise the processing of data from high 
priority sites, the transfer of data to the data 
validator DV over the local area network is 
synchronised to the receipt of the last mes- 
5 sage from a high priority site (from all links). 
Polling for this data is synchronised to a half- 
second flag: 

Messages received from any other central 
control processor are passed to a task which 

10 sets up additional data in the poll request data 
packets or interrupts the polling sequence to 
transmit higher priority packets in between 
poll requests. Down line loading of outstations 
database(s) is phased so that the polling se- 

1 5 quence is not unduly delayed. 

'WANTED' LIST HANDLING . 

A communication controller CCL only re- 
ceives a message packet from a data validator 

20 DV for a 'Wanted' vehicle when an. anomaly is 
detected at a high priority outstation. It is 
important to get that information to the out- 
station quickly- — -to display the data on a 
police terminal or to get a frame of a picture 

25 of the vehicle sent to the central control, so 
the poll request sequence is interrupted, to 
send a special 'wanted' vehicle data, packet. 

CONFIGURATION DATA HANDLING AND 

30 INITIALISATION v : 
. During communication controller CC initial!- 
- sation, theconf iguration of all equipment un- 
der the control . of that communication control- 
ler CCL is down-line loaded from, the supervi- 

35 sory processor and stored in random access * ; 
memory. This data includes the configured 
high priority and low priority outstation lists, 
communication systems addresses for each 
outstation (HDLC network) and central control 

40 processor local area network and the configu- r 
ration data for each outstation (including inter- 
rogator and loop layout configuration). 

Whenever an outstation is (re)initialised the 
communication controller CCL controls both 

45 the link set-up procedure and the down-line, ; p 
loading of data. If an outstation is being 
initialised whilst the system is active, there 
must be minimal interference with data. re- 
trieval from other outstations, so once down- 

50 line loading has started, the data packets are 
\ interleaved between low priority outstation 
poll requests (not delaying high priority poll- 
ing;.- 

55 REAL-TIME UPDATES ,V v. 

;.;Whilst on-line, the changes to communi- 
cation controller configuration data are:. 
. a) Change of outstation priority, when a 
terminal is connected or disconnected; and 

60 b) Change of data validator DV address on 
the local area network, if processors are sub- 
stituted. 

In the first case, the communication control- 
ler CCL simply changes the relevant outstation 
65 between the high and low priority lists. In the 



latter case, the supervisory processor SP, 
sends update information to the communi- 
cation controller CCL, which changes the rele- 
vant address for that data validator DV on the 
70 local area network. 

FAULT DETECTION AND RECOVERY 

Apart from carrying out self checks when 
requested and sending the results to the su- 

75 pervisory processor SP, a communication con- 
troller CCL monitors the HDLC links for faults. 
Each data packet sent to an outstation should 
be acknowledged by a reply data packet im- 
mediately. If the reply is corrupted, the frame 

80 check sequence fails to match, or no reply is 
received for any transmission within a timeout 
period, the communication controller CCL re- 
transmits the packet up to twice more. If no 
acknowledgement is received by this time, the 

85 outstation is marked 'suspect faulty' and the 
poll sequence continues. A count of consecu- 
tive 'suspect fault' indications is maintained 
each time the outstation is polled, and is 
cleared when an acknowledgement is re- 

90 ceiyed. When the count reaches a limit of say 
3, the outstation is marked 'faulty' and the SP 
inforrried. Once the supervisory processor SP 
has recorded the fault, it can only be cleared 
by an operator (in the Central Office) or engi- 

95 neer (frorri an outstation terminal). v : . .. 

DATA VALIDATORS ; 1 ; : 

Concerning the data validators pV/ .their 
primary function is. to validate vehicle data 
100, before preparation of invoices. The, data vali- 
dator DV receives individual Vehicle ENlP data 
from.the communication controllers. CCL and 
checks the identity and location of each 
vehicle before sending the accounting infor- 
105Vmatidnjio the accounts processor AP which 
:. in | records each ^vehicle's road usage and periodi- 

{ r ,ca\\Y Invoices the owner., ' " 
] .' t .[! y In or)e arrangement of the system/ account- 
.^Lng information is sent to the supervisory 
1 10/ processor SP and then to the accounts proces- 
1 / sdr AP over a direct serial link SL In another 
. . arrangement : pf the system, accounts ihfbrma- 
' tion. is sent tc> the accounts processor AP over 
the inter-processor bus IPB. \ t :? : 
115 Whenever the .data validator DV fails to . 
confirm the identity or location of a vehicle at 
a high priority site, it immediately sends a 
message back to that outstation OS. At a 
CCTV outstation this initiates transmission to 
1 20 the central office of a frame of a picture of the 
vehicle .which is suspect. At a; manned site the 
data on the suspect vehicle will be output to 
the police or maintenance terminal. 
- In addition, for all sites regardless of prior- 
125 ity, if the data validator DV fails to confirm the 
location (outstation) or security code of the 
vehicle, the information (together with the last 
J . known, location) is passed on to thi^ siipervi- 
^'"jfory processor SP which attempts to recover 
130 the situation ('Anomaly Processing') or iden- 
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tify 'suspect' vehicles. These are then added 
to a 'Want6d' fist and also notified to the data 
validator DV. 

Two types of anomaly are passed to the 
5 supervisory processor SP for further analysis: 
an invalid security code for an ENP, or an 
invalid location (outstation) when compared 
with the vehicle's fast known location. Each of 
these anomalies may be caused by a vehicle 
10 apparently missing one or two outstations 
through 'rat runs', a faulty outstation. a faulty 
ENP on the vehicle, or a rogue vehicle whose 
ENP has been tampered with. 
The supervisory processor requests vehicles 
15 to be marked as 'wanted' and whenever a 
data validator DV receives data for such a 
vehicle, it is sent on to the supervisory proces- 
sor SP immediately. The data validation pro- 
cessing is illustrated in the flow diagram of 
20 Figure 4. 

It is necessary to process individual vehicle 
information as fast as it is arriving at the 
central control CC, and to provide any control 
information for the outstations as quickly as 
25 possible. To achieve this, a distributed micro- 
processor system is employed which uses dif- 
ferent levels responsible for different func- 
tions. : . .... 

At the lowest level within the central con 7 
30 trol, communication controllers CCL poll out- 
stations OS regularly to retrieve individual 
vehicle information from the road. 

As previously mentioned, this information is 
then buffered for onward transmission to a 
35 data validator DVthe selection. of data valida- 
tor DV being dependent upon the vehicle 
• serial number > O.^^-v^ : ^' r .- Z'- 

A set of data validators DV check each 
vehicle's information in order to^charge >the, . 
40 owner for, road usage related to the sites 
(outstations OS) passed. !n order to, handle 
350,000 vehicles, each. data validator DV is 
allocated part of the whole database (in the 
order of 40-50,000 vehicles, although this 
45 r may be reduced if the local area network can 
. handle more nodes easily). When data is 
received from a communication controller CCL 
it is quickly processed and the result passed 
on to either the accounts processor A P or the 
50 supervisory processor SP in accordance with 
whether the accounts processor interfaces the 
bus IPB or ,is served by a serial link SL from 
the supervisory processor SP respectively. The 
incidence of invalid data should be such as to 
55 keep the loading in the supervisory processor 
SL lev/ compared to the loading on a data 
validator DV. 

The advantages of using a number of small 
processors rather than one large one include: 
60 a) Lower overall cost; 

b) Lower maintenance costs; 

c) Possibility of smaller system initially, with 
controlled build-up to a larger system; 

d) Input-output load is distributed; 

65 e) Any fault will affect only a part of the 



system; 

■n Mo mutiny maintpnanrp i« rnniiireH on 

- / - - — - — — — - — • * — — — • — i — • — — 

the data validators DV; 

g) The mechanical number/ENP serial num- 
70 ber relationship need only be retained in those 
processors requiring it, i.e., data validators DV 
and supervisory processors SF, thereby max- 
imising security by minimising accessibility of 
this information to operating staff. 

75 

OPERATION 

As data packets are received from com- 
munication controllers CCL they are put into 
high and low priority queues, with the high 

80 priority queue being processed at the first 
available opportunity (when any current pro- 
cessing finishes), in case a response has to be 
returned to the outstation quickly. 
Each vehicle's data are checked for: 

85 i) Correct data validator DV (as routed 
through from the communication controller 
CC); 

ii) Valid, commissioned ENP (enables access 
to the vehicle's current database information); 
90 iiii) Being 'wanted' (data sent on the supervi- 
sory processor SP immediately); 

iv) Valid security code (if any); and 

v) Valid location with reference to the last 
recorded location. 

95 If the data was received from a high priority 
site and test (iii) succeeds or any of tests 
(i,ii,iv or v) fail, infonnatiori is sent immedi- 
ately to the outstation for appending to a 
display on a police terminal or to a display at 

TOO the central control. 
' To speed the processing, ENPs are distri- 
buted evenly throughout each data validators 
DV memory and a simple mapping from the 
low order bits of the ENP serial number is 

105 used to minimise searches for the actual data- 
base entry to a maximum of 30 vehicles in 
each section. Also, table look-up techniques 
are applied to security code checking (byte 
orientated) and location-to-location movement 

110 validation, to optimise processing time, 

MESSAGE HANDLING — SUPERVISORY 
PROCESSOR AND ACCOUNTS 
Anomalies are passed on to the supervisory 

115 processor SP as soon as they are detected 
(one vehicle per packet) over the Iocs area 
network. Data forwarded to the supervisory 
processor SP are the received ENP data and 
(provided the ENP existed in the DV database) 
, 1 20 the current database record for the vehicle. 

Accounting information is accumulated in 
the data validator DV in a large buffer so that 
larger, infrequent packets can be forwarded to 
the accounts processor when either the data 

125 in the buffer reaches a pre-defined size or 
after a known time since reception of data 
from the last outstation. Apart from data vali- 
dator DV initialisation (down line loading of 
data validator DV configuration and database 

1 30 information) the supervisory processor SP 
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sends the following information to a data 
validator DV: i 

a) Time synchronisation— a local area net- 
work packet broadcast to all central control 

5 processors .to ensure real time synchronisation 
(the data validator DV needs time-qf-day to 
send accounting information); 

b) Add a vehicle to the 'Wanted List' to- 
gether with a reason; 

10 c) Remove an operator-wanted vehicle from 
the 'Wanted List'; 

d) Remove a data validator DV-anomoly 
from the Wanted List'; 

e) Data validated (sending back an anomaly 
15 which has been checked out by the SP); 

f) Update vehicle database (sending back 
the most recent data after an anomaly has 
been corrected by analysing several consecu- 
tive packets in the supervisory processor SP); 

20 g) Mark a location 'faulty'; 

h) Clear a 'faulty' indication; ... 

i) Request a vehicle's current location (in 
*■ response to an operator command at the 

supervisory processor SP); 

25 j) Instructions to perform a self-check. 

The last two require a specific reply to be 
sent to the supervisory processor SP. Process- 
ing of these data packets is handled at a lower 
priority than raw vehicle data. 

30 . • : • •• •: ; 

REAL-TIME UPDATES 

Whenever a vehicle's ENP data is, validated 
(either directly in the data validator DV.or via 
the anomaly processing in the supervisory 

35 processor SP), the current database record in 
the data validator: DV is updated yvith-curreht 
location and security code indication .*The 
'Wanted List' and.'Fauijty ..LocatiphV markers 
are also updated as and when directed by the 

40 supervisory processor SP.; <••=..■, 

A basic database, change occurs when ah 
ENP is commissioned. Here ^he supervisory 
processor SP controls the commissioning pro- 
cess and updates the data validator, .DV . data- 

45 base before informing the fitting station that, 
the ENP is accepted. 

SUPERVISORY PROCESSOR /• '\ 

Considering the supervisory processor SP, 

50 one of its main functions is to commission . 
new ENPs. New vehicle information- is , sent to 
the supervisory processor SP from a fitting 
station and it is checked against the existing 
database (to ensure there is no duplication of 

55 data). Valid data is then updated in the super- 
visory processor SP and the data validator DV 
and is sent back to the fitting station for 
confirmation by the operator. Upon receipt of 
the confirmation, the ENP is 'commissioned' 

60 and the system is ready to accept information 
from any location. 

The supervisory processor SP, manages the 
resources of all central control CC processors 
and performs secondary functions that arise 

65 from DV data validator operations. 



In one arrangement, the accounts processor 
AP does not interface to the local area net- 
work, so all accounting information is routed 
through the supervisory processor SP, which 

70 queues information on a disc store DS, and 
passes it serially over a 9600 baud direct link 
SL to the accounts processor AP. This ar- 
rangement is not necessary when the ac- 
counts processor AP interfaces to the local 

75 area network. The supervisory processor SP 
system is built around a disc-based operating 
system because this processor needs to: 

a) Hold large amounts of data, for all levels 
of processor in the system; 

80 b) Store vehicle data over quite long periods 
of time, for anomaly processing; 

c) Handle operator communications, via 
several terminals and 

d) Maintain information on system status 
85 and performance related to the many proces- 
sors and their databases. 

Operator communication OC facilities are 
provided via the supervisory processor SP, 
with two visual display units (VDU's) interfac- 
90 ing to the operators in the control room and 
bhe hard copy terminal upon which the super- 
visory processor SP logs all significant events. 

The supervisory processor SP contains a 
real time clock which is used to maintain 
95 realtime (synchronised) in all other processors 
that require it, for example for accounting 
information, relating CGTV pictures to a ts me 
of day and accessing vehicle movements in 
" ' ■ 'time/* > ' v "\ 

100 \ The supervisory processors SP re-validate 
4 ENP data whenever possible; identify equip- 
ment faults from ENP data analysis, manage 
database information, and provide information 
to the bpe?ators in a simple but effective way. 
1 05 v Thb 'supervisory processor SP uses the local 
area network to ensure that communications 
^etvyeen allcentral control CC processors are 
? maintained and thus all of them are function- 
' jng correctly/ Changes to system configuration 

I l O-'jtcbmmissioning/de-cbmmissioning of ENPs; 

' v Switching to standby processors; adding new 
equipment or links) are all controlled by the 
supervisory processor SP system,- so 1 that the 

\ : central store of all database information is 

I I 5 kept up-to date on a disc DS. 

The relationship between each vehicle's me- 
chanical number plate (MNP) and ENP serial 
number is stored in the data validator DV (to 
identify the MNP from the ENP serial number) 

120 and in the supervisory processor SP. In the 
supervisory processor SP only/ the inverse 
relationship is also held (on disc), with ENP 
being stored against MNP. This enables map- 
ping from an operator-defined MNP to its 

125 corresponding ENP serial number. There is no 
need for any operator to know any vehicle's 
ENP serial number, thus ensuring security of 
this coded information. 

130 ANOMOLY PROCESSING 
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When anomalies are received by the super- 
visory processor SP ; it attempts to re-validate 
the data (security code, location or both). 
Initially invalid locations are checked using 
5 the vehicle's last known location, to discover 
whether the vehicle has passed through faulty 
outstations and to identify 'suspect' outstation 
equipment. If more than one, non-faulty out- 
station exists between the two given locations, 

10 the vehicle is added to the 'Wanted List' and 
a record is kept of all its movements until an 
operator confirms re-validation. , 

Invalid security codes cannot be re-validated 
immediately, so a record is started which 

1 5 keeps track of the vehicle's security code 
changes and to continue validating the loca- 
tions. If, after 3 security codes have been- 
recorded, its position in the code sequence 
cannot be ascertained, the vehicle identity is 

20 added to the 'Wanted List' as for invalid 
locations. 

For each subsequent recognition of a 
vehicle on the 'Wanted List' the data DV 
sends the latest information to the supervisory 

25 processor SP which adds it to the vehicle's 
record and attempts to re-validate the last 3, 
say, security code and location parameters. 
When a revalidation is achieved, the system 
informs the operator who can display the 

30 record of (information and, optionally, clear the 
vehicle from the 'Wanted List'. 

Wh*n.ti8ta as re-validated (the supervisory 
processor SP ensures that both location and 
security code are correct), the latest data are 

35 passed back to the data validator DV to up- 
date its database and the vehicle is removed 
from the 'Wanted List' in both supervisory 
processor SP and data validator DV. (unless 
required by the operator for other reasons). : _* 

40 A flow diagram of the anomoly proces- 
sing/fraud identification is illustrated in Fsgure 
5 Operator facilities OC are available to mani- 
pulate the 'Wanted List' and for 'fault manage- 
ment VDU terminals allow system messages 

45 to be displayed in a non-scrolling area of the 
screen, and operator information to be 
scrolled using the remainder of the screen. 

CLAIMS 

50 1 . A data capture system for the automatic 
charging of tolls to vehicular users of roads, 
the capture system comprising, a plurality of 
vehicle identity data transmitting means each 
being individually attachable to vehicles, a 

55 plurality of roadside vehicle identity data inter- 
rogating means linked by a communications 
network with a central control which includes 
a plurality of communications control proces- 
sors, and a plurality of vehicle identity data 

60 validating processors which communicate by 
means of a common inter-processor bus, 
wherein each data validating processor is allo- 
cated a discrete subset of all vehicles handled 
by the system and wherein upon transmitted 

65 vehicle identity data being detected by any 



one roadside vehicle identity data interrogat- 
ing means, the vehicle identity data is 
transmitted through the communications net- 
work to a communications control processor 

70 and then by way of the common rnter-proces- 
sor bus to the particular data validating pro- 
cessor allocated to the subset of vehicles 
within which, the detected vehicle identity 
data is located, whereupon, the detected 

75 vehicle identity data is validated for use in 
enabling the preparation of toll invoices for 
despatch to the particular vehicle user con- 
cerned. 

2. A data capture system as claimed in 
80 claim 1, in which the vehicle identity 

transmitting means is electronic number plate 
apparatus comprising a module incorporating 
storage means for storing the vehicle identity 
data and transmitting means for transmitting 

85 said vehicle identity data and wherein the 

vehicle identity data comprises for each indivi- 
dual electronic number plate apparatus, a 
code representing the unique serial number of 
the apparatus, the serial number being pro- 

90 grammed into the storage means. 

3. A data capture system as claimed in 
claim 2, in which the vehicle identity interro- 
gating means is an outstation comprising an 
interrogator, a transmission unit, a processor 

95 and a plurality of interfaces to Eocal equip- 
ment, wherein the outstation is connected to a 
plurality of inductive receive loops which are 
capable of electromagnetically coupling with 
the transmitting means enabling selection of 

100 the codes indicative of a vehicle's identity, the 
code signals being demodulated by the inter- 
rogator and passed to the processor for code 
verification; whereupon the verified code is 
transmitted from the outstation by the 

105 transmission unit. 1 

4. A data capture system as claimed in 
claim 3, in which one local equipment com- 
prises a closed circuit television (CCTV) sys- 
tem which stores frames of pictures of 

1 10 vehicles in a suspect category which are cap- 
tured in the CCTV system, wherein the stored 
picture frames are transmitted to the central 
control for analysis and/or display upon a 
message, relating to vehicles in the suspect 

1 15 category, being transmitted from a communi- 
cation controller to an outstation incorporating 
a CCTV system. 

5. A data capture system as claimed in 
claim 4, in which the communications net- 

1 20 work is a cable network, wherein the network 
is arranged to link the outstations to an inter- 
processor high-spieed bus at the control 
centre, under the control of the communi- 
cation controllers and wherein each communi- 

1 25 cations controller incorporates a plurality of 
outstation channels each of which is con- 
nected to a plurality of outstations wherein 
each communications controller is enabled to 
control a part of the complete cable network. 

1 30 6. A data capture system as claimed in 
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claim 5, in? which the data validating proces- 
sors and a. supervisory processor are con- . 
nected to the- inter-processor bus, wherein 
each data validating processor receives, from 
5 a communication, controller, .vehicle data com- 
prising: serial number, security code and loca- 
tion (outstatiqn) concerned with its own allo- 
cated subsetof vehicles exclusively fqr prq- 
cessing. . , : . 

10 7. A data capture system as claimed in 
claim 6, in which the data validating proces- 
sor is arranged to check that/the serial num- 
ber is in the range allocated to that particular 
data validation wherein when the check is not 

1 5 confirmed a message indicating an invalid 
serial number is sent to the supervisory pro- 
cessor. 

■ 8. A data capture system as claimed in^ 
claim 7, in which when the serial number 

20 check is confirmed, the mempiV Joqation in 
the data validator holding the vehicle's data is 
determined wherein a check to determine . if 
the electronic number plate identified is in 
commission, wherein if the check is, not co- 

25 nfirmed a message indicating an invalid serial, 
number is sent to the supervisory processor. 

9. A data capture system as claimed irj 
claim 8, in which when the data validation 
processor determines that either the location 

30 (outstation) of the vehicle with respect iq jts v 
last stored location is invalid or the security 
code with respect to the last stored security 
code, is invalid/ in each .case respectively,; a 
message is sent to the supervisory processor 

35 to initiate anornoly processing. T lV ^ 

• 10. A, data capture. system as claimed in "" 
any of claims 7, 8 or.j9 In. which the yehiple 
data being processed is from, a high priority 
outstation, a message is sent to tha£outsta- 

40 tion to; '.^.. r ';. 

• a) display the vehicle data at the police or "* 
maintenance terminal, or- , 

b) to append the vehicle data to a frame of 
a picture of the vehicle. .1 

45 , IX: A data capture system as claimed in . , 
claim 6, in which when the data validating 
processor determines the serial number loca- 
tion (outstation) and the security code are 
valid, the mechanical registration number and 

50 location are sent to an accounts processor for 
toll charging purposes. . "\\ ] 

12. A data capture system as claimed.in 
claim ,1.1 in which accounting information is 
routed through the supervisory processor, the 

55 accounting information being queued on a 
disc store and transmitted serially over a di- 
rect link to the accounts processor. 

1 3. A data capture system as claimed, in 
claim 11, in which the accounting information 

60 is routed over the inter-processor bus to the. . 
accounts processor. 

14. A data capture system as claimed in 
claim 7, in which when the supervisory pro- 
cessor receives a message indicating an in- 

65 valid serial number the supervisory processor 



arranges for the vehicle identity to be logged 
on a 'Wanted List'. 

15. A data capture system as claimed in 
claim 9, in which upon the supervisory pro- 

70 cessor receiving anornoly data from the data 
validating processor the supervisory processor 
. performs a process for revalidation of the data 
whereby in respect of invalid locations the 
vehicle's last location is checked against its 

75 current location to discover whether the. 

vehicle passed through faulty outstations and 
if it is determined that more than one non- 
faulty outstation exists between two given 
locations the vehicle identity is logged on a 

80 'Wanted List': 

16. A data capture system as claimed in . 
claim 9, in which the supervisory processor 
receives anornoly data from the data validat- 
ing processor; the supervisory processor per- 

85 : forms a process for revalidation of the data, 
whereby a record is started which keeps track 
of the security code changes with continued 
validation of locations, and then following the 
recordal of three security codes the position in 
90 the' code sequence can not be ascertained, the 
/vehicle identity is logged on a 'Wanted List'. 
1 7. A data capture system as claimed in 
claims 15 or 16, in which revalidated data 
from the supervisory processor is returned to 
95 the reievanit data validation processor Whereu- 
r pori its j records are updated and the vehicle 
identity is removed from the 'Wanted. List'. 
; : 1 81 ; A data 1 capture system iasx:laimed in 
• r any one of claims 2 to 1 7> irt which the 
1 00 ' storage* meahs ? is a fuse-link PROrNA . ♦ « 

3 1 9. A data capture system as claimed in . 
' any One 61 clSirns 2 to 1 7, in^which the 
'transmitting -means comprises an aerial. 
2b. A : tfata capture system substantially as 
105 ^described herein, with reference* to, and as 
shown; in i the- accompanying drawings. 
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